$ rpki-client -vvf repo-rpki.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.mft File: E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.mft (raw, json) Hash identifier: icibRd9RntjkHmcjDYC7yo3HILahJiF0sI88NGfl8Tk= Subject key identifier: 42:59:60:B9:4E:CA:C2:EA:B3:DF:D9:A2:2E:2E:5D:E5:30:FA:E9:CB Authority key identifier: E4:81:3B:FD:9F:D2:7C:9C:A2:2A:77:0F:5D:84:6B:50:FC:78:3A:3C Certificate issuer: /CN=E4813BFD9FD27C9CA22A770F5D846B50FC783A3C Certificate serial: 1BD86752FF87B9C166484FA4E7FC2880481B42E0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.mft Manifest number: 018A Signing time: Mon 28 Apr 2025 11:20:41 +0000 Manifest this update: Mon 28 Apr 2025 11:15:41 +0000 Manifest next update: Thu 01 May 2025 17:16:41 +0000 Files and hashes: 1: 3130332e3134372e37342e302f32332d3234203d3e203137373639.roa (hash: O88yPYmN6xDUFSj/RxvbUkag/UKNDi1pEvsS211Q2AQ=) 2: E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.crl (hash: PyRfC8ico8HgxSpF8azE6Wjnvhd7SopLRypPKiXQ56s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.crl rsync://repo-rpki.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 17:16:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:d8:67:52:ff:87:b9:c1:66:48:4f:a4:e7:fc:28:80:48:1b:42:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E4813BFD9FD27C9CA22A770F5D846B50FC783A3C Validity Not Before: Apr 28 11:15:41 2025 GMT Not After : May 1 17:16:41 2025 GMT Subject: CN=425960B94ECAC2EAB3DFD9A22E2E5DE530FAE9CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:7c:0c:37:8d:02:ca:43:a8:63:18:0b:a0:2a: d0:27:fc:ce:8b:3e:06:49:21:3f:96:32:b6:e0:33: 57:66:09:2d:88:37:a1:08:fc:74:a3:88:d0:ab:5a: 37:75:eb:c0:14:11:56:a2:16:ea:c1:54:49:a5:51: ef:88:39:bf:8b:d9:48:98:be:0a:54:8d:71:4b:2d: 2a:21:f6:c8:31:1a:9d:28:0b:e1:ea:a4:e7:b2:d3: ce:58:b1:bf:45:bc:92:7b:af:64:a3:53:40:15:ec: 8f:4a:70:e6:97:5e:93:ce:95:35:59:1e:96:af:ec: bc:30:5b:b5:63:73:d7:cb:76:c8:cb:6f:0d:5b:43: 28:63:f9:d3:dc:d9:bb:c9:be:46:6a:1f:38:03:89: 3d:11:0f:0a:34:55:02:f1:b8:49:a6:45:84:fc:17: c0:e9:94:17:00:d7:c9:4e:ed:04:0a:46:61:97:ee: 24:7e:3c:de:65:85:ea:73:41:85:0c:dd:3d:ca:68: f9:10:e6:84:fc:3e:1e:62:d1:04:83:70:c5:55:77: 92:1f:4b:b4:b2:a7:55:f0:4e:cf:be:4a:c5:24:c8: 64:03:68:eb:14:4d:a8:60:f2:d4:3c:59:92:1f:99: ff:14:0b:39:8d:bf:af:c6:5a:c5:c1:d3:85:da:22: 8f:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:59:60:B9:4E:CA:C2:EA:B3:DF:D9:A2:2E:2E:5D:E5:30:FA:E9:CB X509v3 Authority Key Identifier: keyid:E4:81:3B:FD:9F:D2:7C:9C:A2:2A:77:0F:5D:84:6B:50:FC:78:3A:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/272907d3-be24-4da8-96bb-f1228fc99205/0/E4813BFD9FD27C9CA22A770F5D846B50FC783A3C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:13:e4:f4:b0:65:9b:0d:6e:76:97:70:90:c6:ff:82:30:57: f4:be:21:03:e0:6c:a5:4d:f6:ff:06:38:a5:c2:e6:83:15:a6: 31:0f:cc:8c:ef:da:75:f7:c4:31:85:53:6a:de:01:34:b9:ad: 25:57:e7:79:ec:c8:35:7f:8e:1a:4c:0b:a3:d9:7b:a3:39:d4: 2d:70:3f:14:c8:92:c7:01:a7:d7:f2:a8:cf:0d:98:b3:1f:d0: 16:ba:16:7f:fb:f7:ae:14:7d:ee:b5:ef:3e:a8:da:5d:ec:3c: 89:c5:56:f7:c8:9e:3b:c4:d3:ba:7b:b0:60:a1:15:cc:d7:63: e0:1e:01:7b:6b:0b:ee:bc:ed:25:66:f3:f8:1c:83:e5:07:08: 85:8a:38:c2:71:7d:ab:07:75:b8:10:fe:d2:e6:eb:5d:0c:78: 15:58:b9:a9:e1:74:a4:2e:0d:a7:de:d5:9b:ab:f8:f6:a0:a2: 6b:49:7e:b4:dc:6e:da:7a:a5:6b:62:2a:72:9c:6c:d4:27:bb: 9a:29:42:40:3f:86:fe:ff:ad:e4:d9:e2:f8:b9:5a:c5:62:c9: 3e:4e:c1:51:41:a4:5f:26:66:77:c7:63:af:09:f8:69:3a:bc: 92:d9:be:b2:14:95:4e:c1:2a:f2:30:39:8a:9a:3d:2b:76:5b: 63:97:c1:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG9hnUv+HucFmSE+k5/wogEgbQuAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTQ4MTNCRkQ5RkQyN0M5Q0EyMkE3NzBGNUQ4NDZCNTBG Qzc4M0EzQzAeFw0yNTA0MjgxMTE1NDFaFw0yNTA1MDExNzE2NDFaMDMxMTAvBgNV BAMTKDQyNTk2MEI5NEVDQUMyRUFCM0RGRDlBMjJFMkU1REU1MzBGQUU5Q0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxfAw3jQLKQ6hjGAugKtAn/M6L PgZJIT+WMrbgM1dmCS2IN6EI/HSjiNCrWjd168AUEVaiFurBVEmlUe+IOb+L2UiY vgpUjXFLLSoh9sgxGp0oC+HqpOey085Ysb9FvJJ7r2SjU0AV7I9KcOaXXpPOlTVZ Hpav7LwwW7Vjc9fLdsjLbw1bQyhj+dPc2bvJvkZqHzgDiT0RDwo0VQLxuEmmRYT8 F8DplBcA18lO7QQKRmGX7iR+PN5lhepzQYUM3T3KaPkQ5oT8Ph5i0QSDcMVVd5If S7Syp1XwTs++SsUkyGQDaOsUTahg8tQ8WZIfmf8UCzmNv6/GWsXB04XaIo+7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQllguU7Kwuqz39miLi5d5TD66cswHwYDVR0j BBgwFoAU5IE7/Z/SfJyiKncPXYRrUPx4OjwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NzI5MDdkMy1iZTI0LTRkYTgtOTZiYi1mMTIyOGZjOTkyMDUvMC9FNDgxM0JGRDlG RDI3QzlDQTIyQTc3MEY1RDg0NkI1MEZDNzgzQTNDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTQ4MTNCRkQ5RkQyN0M5Q0EyMkE3NzBGNUQ4NDZCNTBGQzc4 M0EzQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjcyOTA3ZDMtYmUyNC00ZGE4LTk2 YmItZjEyMjhmYzk5MjA1LzAvRTQ4MTNCRkQ5RkQyN0M5Q0EyMkE3NzBGNUQ4NDZC NTBGQzc4M0EzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI0T5PSwZZsNbnaXcJDG/4IwV/S+IQPgbKVN 9v8GOKXC5oMVpjEPzIzv2nX3xDGFU2reATS5rSVX53nsyDV/jhpMC6PZe6M51C1w PxTIkscBp9fyqM8NmLMf0Ba6Fn/7964Ufe617z6o2l3sPInFVvfInjvE07p7sGCh FczXY+AeAXtrC+687SVm8/gcg+UHCIWKOMJxfasHdbgQ/tLm610MeBVYuanhdKQu Dafe1Zur+PagomtJfrTcbtp6pWtiKnKcbNQnu5opQkA/hv7/reTZ4vi5WsViyT5O wVFBpF8mZnfHY68J+Gk6vJLZvrIUlU7BKvIwOYqaPSt2W2OXwbk= -----END CERTIFICATE-----Generated at Tue Apr 29 00:36:30 2025 by rpki-client